Constangy Adds Two Partners to Growing Cybersecurity & Data Privacy Practice

Constangy is pleased to announce that Andrew Chase and Craig Steen have joined the firm as partners, further expanding Constangy’s national Cybersecurity & Data Privacy practice and strengthening its services in incident response, privacy compliance, cyber litigation, and risk management.

“Andrew and Craig bring an exceptional combination of experience, technical insight, and practical judgment that will immediately benefit our clients,” said Neil Wasser, chair of Constangy’s executive committee. “Their backgrounds reflect the evolving demands employers face as cybersecurity threats grow more sophisticated and regulatory obligations become more complex. We are excited to welcome them to Constangy and to continue building a market-leading cybersecurity and data privacy practice.”

Craig Steen – Philadelphia

Craig is a member of the Constangy Cyber Team and is based in Philadelphia, where he advises organizations across industries on managing legal and operational risks related to data privacy, security, and regulatory compliance. His work includes guiding clients through every stage of the incident response lifecycle—from detection and containment to remediation and notification—while coordinating with forensic investigators, regulators, and law enforcement to support swift and effective response efforts. Craig also counsels clients on compliance with complex privacy and data protection laws, including HIPAA, GLBA, FERPA, and state breach notification statutes, as well as regulatory guidance affecting the insurance and financial services sectors, and helps organizations develop risk management strategies to strengthen cybersecurity resilience. Before joining Constangy, Craig represented clients in privacy and security incidents, civil litigation, criminal matters, and regulatory investigations, and handled high-profile investigative matters involving higher education and athletics. Craig earned his J.D. from Cornell Law School, where he served as a General Editor of the Cornell Journal of Law and Public Policy and wrote for Cornell’s Legal Information Institute, and received his B.A. in Political Science from Yale University. Craig is admitted to practice in Pennsylvania and the U.S. District Court for the Eastern District of Pennsylvania.

Andrew Chase – New York

Andrew is a member of the Constangy Cyber Team and is based in New York, where he works with Constangy’s cyber litigation practice defending organizations in complex class action litigation arising from data security incidents and privacy-related claims. He brings more than two decades of combined legal, cybersecurity, and technology leadership experience to the team, including extensive courtroom experience with more than 60 jury trials and over 80 bench trials. Prior to joining Constangy, Andrew advised clients on state, federal, and international privacy and cybersecurity compliance, cybersecurity governance, commercial contracting, and incident response, and also brings significant hands-on technical leadership experience as a network security architect designing and delivering enterprise cybersecurity programs and managed security services. Andrew earned his Juris Doctor from Seattle University School of Law, his Master of Science in Computer Information Systems (Security Concentration) from Boston University, and his Bachelor of Science in Computer Information Systems from Park University, and also holds a Certificate in Compliance Systems from Cornell Law School. Andrew previously served as a Computer Specialist with the United States Marine Corps and maintains multiple active privacy and cybersecurity certifications, including CISSP, CISM, CIPP/US, ISO/IEC 27002:2005 Information Security Foundation, and GIAC Law of Data Security & Investigations (GLEG). He is admitted to practice in New York State and Washington State.